When trying to add a specific threat ID for DNS spyware related threat inside Objects > Security profiles > Anti-spyware > Profile > DNS signatures > Threat ID exceptions, you may get the following error:
Threat <ID#> must be a value in range 3800000-4999999 or 5800000-5999999
Error while trying to add for threat ID 14875 Poison DNS request traffic.
Only threat IDs with value in ranges 3800000-4999999 or 5800000-5999999 can be added to threat ID exceptions.
For more info on threatID ranges in the Palo Alto Networks Content Database, please see: